Cisco ACS access restriction

[Sreejith.S]

We are running ACS 5.8 in the environment . We have a requirement to restrict access to one specific user group (part of single identity group) to RO access to all devices . How can i write an access policy to achieve ? Do we have specific shell profile & command sets to restrict access ..

[ssambourg]

Hi,

You will need to affect shell privilege and command set in result profile linked to a condition that match your identity group.

Did you try this : https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113590-acs5-tacacs-config.html

HTH